Host your own
key system.
Plug it into anything.
Keystation is one platform for three kinds of credentials — script keys with HWID locks & checkpoints, API keys with scopes & rate limits, and software licenses with activation control. Tenants sign up with Nabzclan, mint keys, hit /api/v1.
- validation p95
- 38ms
- regions
- global
- uptime sla
- 99.99%
Three flavors of
credential.
One operator console.
Pick the product surface that matches what you're shipping. Mix and match within a tenant — every key surface speaks the same API shape, so your client code rarely changes.
Script keys
HWID-locked, checkpoint-gated keys for executor scripts. Bind to a player, gate behind ad-link checkpoints, set lifetime in minutes or days. Bypass-resistant by design.
- HWID binding (first-use lock)
- Multi-step ad checkpoints
- Time-windowed lifetime
- Discord ID gating
API keys
Scoped sk_xxx keys for SaaS-style API access. Rate limit per key, allow-list origins, rotate from the dashboard. Per-route quota tracking out of the box.
- Scoped permissions
- Per-key rate limits
- Origin allow-list
- Usage quotas
License keys
Activation-limited keys for paid software. Bind to machine fingerprints, deactivate seats from the panel, track installs across versions. License hand-off is one POST.
- Activation limits per key
- Machine fingerprint binding
- Seat management
- Offline grace period
Ship your code,
not the recipe.
Every Keystation plan ships with a built-in obfuscator covering seven languages — Lua for executors, JavaScript for browsers, PHP for endpoints, HTML/CSS for pages, plus Python and JSON. Three strength presets, one click, never leaves our infra.
From signup to validated key in under three minutes.
Sign in with Nabzclan
OAuth handshake against nabzclan.vip with scope user:read. No new accounts, no new passwords. Your operators don't onboard twice.
Spin up a project
Pick a surface — script, API or license — give it a name, choose your defaults for HWID, lifetime, scopes, rate limits. You get a public_id and a secret.
Hit /api/v1
Drop the validate snippet into your script, server or installer. We respond in under 40ms with the verdict and fire a webhook the moment anything noteworthy happens.
What kinds of keys can I host on Keystation?+
Three surfaces: script keys (HWID-locked, checkpoint-gated, time-windowed — for Lua/Roblox executors), API keys (sk_xxx with scopes, rate limits, origin allow-list — for SaaS APIs), and software license keys (activation-limited with machine binding — for desktop/mobile apps).
Which languages does the built-in obfuscator support?+
JavaScript, Lua, PHP, HTML, CSS, Python and JSON. Three strength presets per language with engine-specific options like HWID-bound payload wrapping, string encryption, anti-debug, and multi-pass eval nesting.
How does authentication work?+
Keystation uses Nabzclan OAuth — your operators sign in with their existing Nabzclan account (scope user:read). Subscription tier (Free, VIP·1 – VIP·4) syncs automatically from subscriptions.nabzclan.vip and gates per-plan limits.
What does the validate endpoint return?+
A JSON verdict: { valid: true|false, key_id, type, expires_at, scopes, metadata } or a rejection with a reason code (invalid_key, expired, hwid_mismatch, activation_limit, checkpoints_required). Hits typically respond in under 40ms.
Can I integrate with my own server using API calls?+
Yes. The validate endpoint is callable with just the public project ID. Administrative operations (generate, revoke, inspect) require the project's API secret as a Bearer token. Webhooks fire HMAC-signed POSTs on every key event.
Is there a free plan?+
Yes. The Free tier includes 1 project, 100 keys, 1,000 validations per month, 25 obfuscations per month, and the full API surface. Paid tiers add capacity and unlock larger obfuscation inputs.
One endpoint.
Every stack.
The validate endpoint takes a key and a fingerprint, returns a verdict. Lua scripts, Node servers, Python installers, plain curl — they all speak the same dialect.
curl -X POST https://keysystem.nabzclan.vip/api/v1/keys/validate \
-H "x-project: p_arctic_fox_92" \
-H "Content-Type: application/json" \
-d '{
"key": "KS-7H2P-VLNX-9KJ4",
"hwid": "7a3f2e9b4c1d8a"
}'Everything an operator
needs out of one panel.
Real-time analytics
Validation volume, success rates, top failing keys, geo breakdown. Drill down by route or by key.
HMAC-signed webhooks
key.validated · key.activated · checkpoint.complete · license.revoked. Retries with exponential back-off.
HWID locks
First-use binding for script keys.
Ad-gated checkpoints
Linkvertise · Lootlabs · Workink slots.
Audit log
Every action, signed and retained.
Activation limits
Cap seats per license, deactivate from the panel, allow offline grace.
Per-key rate limiting
Token-bucket per key. Hot keys get throttled, not your platform.
Pay for throughput, not seats.
Five tiers, billed and managed through Nabzclan. Every tier includes the full API surface, the full dashboard, and unlimited team seats.
Free
- 1 project
- 100 active keys
- 1k validations / mo
- 3 webhooks / project
- 25 obfuscations / mo
- 50 KB max obfusc. input
- 7d log retention
VIP Tier 1
- 3 projects
- 500 active keys
- 25k validations / mo
- Unlimited webhooks / project
- 250 obfuscations / mo
- 200 KB max obfusc. input
- 30d log retention
VIP Tier 2
- 10 projects
- 5k active keys
- 250k validations / mo
- Unlimited webhooks / project
- 2.5k obfuscations / mo
- 1 MB max obfusc. input
- 90d log retention
VIP Tier 3
- Unlimited projects
- 50k active keys
- 1M validations / mo
- Unlimited webhooks / project
- 25k obfuscations / mo
- 5 MB max obfusc. input
- 180d log retention
VIP Tier 4
- Unlimited projects
- Unlimited active keys
- Unlimited validations / mo
- Unlimited webhooks / project
- Unlimited obfuscations / mo
- Unlimited max obfusc. input
- 365d log retention
Plans are managed on subscriptions.nabzclan.vip/plans ↗ — your tier syncs to Keystation automatically.
Mint the first key.
Watch it light up.
Sign in with Nabzclan, spin up a project, paste two lines of code into your stack. The console wakes up the second something validates.